This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/0fa81e6e-4b16-4b62-8f18-52892e54b90d/0/5C559181306986EE89AADF0A1CFC78EA8A093530.mft File: 5C559181306986EE89AADF0A1CFC78EA8A093530.mft (raw, json) Hash identifier: lcuLIo6fJAfINRU+eXpyYunbo+JEYCoHCdEyPBrzCFA= Subject key identifier: 03:D7:C8:10:B1:CE:BD:32:44:48:F1:0F:5C:76:96:FC:C1:E9:60:A7 Authority key identifier: 5C:55:91:81:30:69:86:EE:89:AA:DF:0A:1C:FC:78:EA:8A:09:35:30 Certificate issuer: /CN=5C559181306986EE89AADF0A1CFC78EA8A093530 Certificate serial: 1A8F2A88AECF4628366FEB86692B1B9B5AA043F3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C559181306986EE89AADF0A1CFC78EA8A093530.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0fa81e6e-4b16-4b62-8f18-52892e54b90d/0/5C559181306986EE89AADF0A1CFC78EA8A093530.mft Manifest number: 015F Signing time: Thu 18 Dec 2025 04:51:21 +0000 Manifest this update: Thu 18 Dec 2025 04:46:21 +0000 Manifest next update: Sun 21 Dec 2025 12:33:21 +0000 Files and hashes: 1: 5C559181306986EE89AADF0A1CFC78EA8A093530.crl (hash: xM3pFu4WUjaIEh/BFQSXMcKPwkS8JUywz3Zs5A4TVB0=) 2: 3130332e3235302e3132392e302f32342d3234203d3e20313531353536.roa (hash: QFsczwBLYtZasUqtJF/xZ2xkrtCRnC+5l41701uTMq4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0fa81e6e-4b16-4b62-8f18-52892e54b90d/0/5C559181306986EE89AADF0A1CFC78EA8A093530.crl rsync://repo-rpki.idnic.net/repo/0fa81e6e-4b16-4b62-8f18-52892e54b90d/0/5C559181306986EE89AADF0A1CFC78EA8A093530.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C559181306986EE89AADF0A1CFC78EA8A093530.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 12:33:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:8f:2a:88:ae:cf:46:28:36:6f:eb:86:69:2b:1b:9b:5a:a0:43:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5C559181306986EE89AADF0A1CFC78EA8A093530 Validity Not Before: Dec 18 04:46:21 2025 GMT Not After : Dec 21 12:33:21 2025 GMT Subject: CN=03D7C810B1CEBD324448F10F5C7696FCC1E960A7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:f0:43:9e:36:22:13:e3:c5:07:fa:10:48:6e: c3:30:e4:03:31:6e:39:40:52:86:d0:96:04:b7:38: 0d:12:f6:27:9e:17:db:23:9c:96:3a:c8:e2:63:86: da:11:e6:a6:5f:7b:0b:a3:ae:d1:5b:f9:d3:ba:f3: 02:2f:cc:c3:a4:e5:ce:8d:43:f9:56:b6:94:f1:37: 7e:ea:ed:a7:7d:6f:5a:80:8e:e8:58:60:62:06:31: 81:17:ec:2c:32:0f:df:fa:59:aa:53:fc:ab:70:c9: 03:f5:93:5f:da:71:ef:3d:18:27:ff:97:fe:5d:1e: 16:5e:be:34:08:1c:c4:80:ff:17:53:eb:e1:09:0d: d3:a9:74:b9:21:c3:f4:86:f5:bd:a5:22:3b:db:3d: 50:c9:4f:d7:48:ea:05:fa:9d:03:60:bd:fe:ff:57: dd:54:33:84:17:73:2f:3c:3d:90:58:ae:fc:b2:22: ed:a1:be:e7:29:80:e1:18:ba:b3:28:3c:9f:d6:a6: ca:66:5c:ae:59:32:0c:39:a1:b5:80:d0:2f:60:3b: 2f:05:4c:cc:d8:a9:cf:5b:33:54:15:a3:7b:a7:c0: 18:62:52:1f:c2:16:f0:f9:ad:3d:3a:6e:ba:69:2e: b9:2b:ee:3b:3c:eb:e0:3b:28:47:b4:6e:09:2e:42: 4f:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:D7:C8:10:B1:CE:BD:32:44:48:F1:0F:5C:76:96:FC:C1:E9:60:A7 X509v3 Authority Key Identifier: keyid:5C:55:91:81:30:69:86:EE:89:AA:DF:0A:1C:FC:78:EA:8A:09:35:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0fa81e6e-4b16-4b62-8f18-52892e54b90d/0/5C559181306986EE89AADF0A1CFC78EA8A093530.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C559181306986EE89AADF0A1CFC78EA8A093530.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0fa81e6e-4b16-4b62-8f18-52892e54b90d/0/5C559181306986EE89AADF0A1CFC78EA8A093530.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:c8:11:3e:54:89:03:dc:90:6d:44:46:29:7e:64:10:8c:3d: 21:9c:1e:72:b8:3d:d4:15:ea:70:54:8c:a5:95:ed:b1:9a:06: ef:49:5c:07:f8:e9:6b:4b:8a:a4:05:54:26:f4:26:b0:34:fd: ce:eb:05:78:05:bb:d6:6c:97:42:1a:69:ec:9c:0d:3a:e6:bf: 18:d6:72:a5:c5:1d:02:93:2b:58:0c:21:57:41:b2:0e:ae:4c: 48:83:55:32:df:1a:f8:13:4a:99:3c:3b:f7:c6:32:b1:32:f1: 4b:5b:f0:4c:6b:e7:56:c4:44:30:3b:a6:de:a2:a8:d0:73:19: e7:51:9f:0d:67:48:ba:4d:69:bc:c1:a3:0e:83:7a:d3:67:33: 91:64:1d:50:27:13:d7:12:07:24:47:15:d3:4b:d1:ed:e1:cd: 9b:7b:10:66:d3:d4:40:6b:70:4d:c9:98:7e:5e:37:b9:0a:7d: a4:1e:26:df:58:30:ec:f0:51:74:fc:7c:c8:c7:2e:d0:1c:3f: 40:5c:ad:5a:45:07:5a:77:8b:24:c6:24:2d:2a:c9:55:aa:1f: ee:d5:d8:97:1e:63:09:c6:d6:1e:11:c8:f5:d9:ec:1e:74:1d: 70:f9:ab:a1:04:b4:c5:79:c3:be:30:fe:73:1d:21:67:a8:b1: b1:09:3f:92 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGo8qiK7PRig2b+uGaSsbm1qgQ/MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUM1NTkxODEzMDY5ODZFRTg5QUFERjBBMUNGQzc4RUE4 QTA5MzUzMDAeFw0yNTEyMTgwNDQ2MjFaFw0yNTEyMjExMjMzMjFaMDMxMTAvBgNV BAMTKDAzRDdDODEwQjFDRUJEMzI0NDQ4RjEwRjVDNzY5NkZDQzFFOTYwQTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCg8EOeNiIT48UH+hBIbsMw5AMx bjlAUobQlgS3OA0S9ieeF9sjnJY6yOJjhtoR5qZfewujrtFb+dO68wIvzMOk5c6N Q/lWtpTxN37q7ad9b1qAjuhYYGIGMYEX7CwyD9/6WapT/KtwyQP1k1/ace89GCf/ l/5dHhZevjQIHMSA/xdT6+EJDdOpdLkhw/SG9b2lIjvbPVDJT9dI6gX6nQNgvf7/ V91UM4QXcy88PZBYrvyyIu2hvucpgOEYurMoPJ/WpspmXK5ZMgw5obWA0C9gOy8F TMzYqc9bM1QVo3unwBhiUh/CFvD5rT06brppLrkr7js86+A7KEe0bgkuQk8LAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUA9fIELHOvTJESPEPXHaW/MHpYKcwHwYDVR0j BBgwFoAUXFWRgTBphu6Jqt8KHPx46ooJNTAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZmE4MWU2ZS00YjE2LTRiNjItOGYxOC01Mjg5MmU1NGI5MGQvMC81QzU1OTE4MTMw Njk4NkVFODlBQURGMEExQ0ZDNzhFQThBMDkzNTMwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUM1NTkxODEzMDY5ODZFRTg5QUFERjBBMUNGQzc4RUE4QTA5 MzUzMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGZhODFlNmUtNGIxNi00YjYyLThm MTgtNTI4OTJlNTRiOTBkLzAvNUM1NTkxODEzMDY5ODZFRTg5QUFERjBBMUNGQzc4 RUE4QTA5MzUzMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACvIET5UiQPckG1ERil+ZBCMPSGcHnK4PdQV 6nBUjKWV7bGaBu9JXAf46WtLiqQFVCb0JrA0/c7rBXgFu9Zsl0IaaeycDTrmvxjW cqXFHQKTK1gMIVdBsg6uTEiDVTLfGvgTSpk8O/fGMrEy8Utb8Exr51bERDA7pt6i qNBzGedRnw1nSLpNabzBow6DetNnM5FkHVAnE9cSByRHFdNL0e3hzZt7EGbT1EBr cE3JmH5eN7kKfaQeJt9YMOzwUXT8fMjHLtAcP0BcrVpFB1p3iyTGJC0qyVWqH+7V 2JceYwnG1h4RyPXZ7B50HXD5q6EEtMV5w74w/nMdIWeosbEJP5I= -----END CERTIFICATE-----Generated at Thu Dec 18 23:50:02 2025 by rpki-client